How severe is CVE-2016-6394?

CVE-2016-6394 has a CVSS 3.x base score of 9.1, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability none.

Is CVE-2016-6394 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (70th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2016-6394?

CVE-2016-6394 primarily affects Cisco Firesight System Software. In total, 38 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2016-6394?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2016-6394 published?

CVE-2016-6394 was published on 2016-09-12 and last updated on 2026-06-17.

CVE-2016-6394

CVE-2016-6394 is a critical-severity vulnerability in Cisco Firesight System Software with a CVSS 3.x base score of 9.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-264.

Key facts

Severity: Critical (CVSS 3.x base score 9.1)
CVSS v2: 5.8
EPSS exploit prediction: 1% (70th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-264
Affected product: Cisco Firesight System Software
Published: 2016-09-12
Last modified: 2026-06-17

Description

Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.

Frequently asked questions

What is CVE-2016-6394?: Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.
How severe is CVE-2016-6394?: CVE-2016-6394 has a CVSS 3.x base score of 9.1, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability none.
Is CVE-2016-6394 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (70th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2016-6394?: CVE-2016-6394 primarily affects Cisco Firesight System Software. In total, 38 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2016-6394?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2016-6394 published?: CVE-2016-6394 was published on 2016-09-12 and last updated on 2026-06-17.

References

Affected products (38)

cpe:2.3:a:cisco:firesight_system_software:5.2.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.2.0.8:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.0.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.0.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.0.7:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.1.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.1.7:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.4.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.4.0.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.4.0.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.4.0.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.4.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.4.1.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.4.1.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.4.1.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:6.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:6.1.0:*:*:*:*:*:*:*

More vulnerabilities in Cisco Firesight System Software

CVE-2015-6335 — Critical (CVSS 9.0): The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote…
CVE-2016-6417 — High (CVSS 8.8): Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower…
CVE-2016-1394 — High (CVSS 8.6): Cisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote attackers to obtain…
CVE-2017-6766 — High (CVSS 7.5): A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco Firepower System Software…
CVE-2016-9193 — High (CVSS 7.5): A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco…
CVE-2016-6460 — High (CVSS 7.5): A vulnerability in the FTP Representational State Transfer Application Programming Interface (REST API) for Cisco…

All CVEs affecting Cisco Firesight System Software →

Other CWE-264 (Permissions, Privileges, and Access Controls) vulnerabilities

CVE-2016-8363 — Critical (CVSS 10.0): An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232…
CVE-2016-7457 — Critical (CVSS 10.0): VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt…
CVE-2015-7425 — Critical (CVSS 10.0): The Data Protection component in the VMware vSphere GUI in IBM Tivoli Storage Manager for Virtual Environments: Data…
CVE-2015-8267 — Critical (CVSS 10.0): The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self…
CVE-2015-7919 — Critical (CVSS 10.0): SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently cause a denial of…
CVE-2015-7071 — Critical (CVSS 10.0): The File Bookmark component in Apple OS X before 10.11.2 allows attackers to bypass a sandbox protection mechanism for…

Browse all CWE-264 (Permissions, Privileges, and Access Controls) vulnerabilities →